$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: lg3yFtRyV6jDWvywrb6/T7Y3p0wX67KQMg92RoTTpVU= Subject key identifier: C9:87:E4:58:FA:A4:06:36:CF:67:DE:CB:48:FA:E3:79:F9:EA:B9:7C Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01AB Signing time: Thu 15 May 2025 02:44:32 +0000 Manifest this update: Thu 15 May 2025 02:44:32 +0000 Manifest next update: Thu 22 May 2025 02:44:32 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: kGq38WnnHND7WFbYOokXr0es/8G3B1hKqIwAhdgZ7rc=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: May 15 02:44:32 2025 GMT Not After : May 22 02:44:32 2025 GMT Subject: CN=68255510-6035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:5d:41:b0:8b:30:d6:b8:cb:6b:81:f2:5c: 3c:71:ea:11:f4:62:a1:7c:3f:47:61:c1:9b:33:35: 6b:53:55:2c:36:50:2b:05:fe:e3:f3:91:81:c9:1b: 3a:b0:a3:8a:86:f2:01:59:7d:7a:f9:7b:ae:a6:b1: d3:4a:6e:04:62:b2:9c:7b:c7:e5:e8:c5:d1:06:3d: 65:0c:96:27:f3:41:cb:61:04:41:b7:03:85:9e:e2: 0b:1b:07:89:24:a9:56:99:82:fb:b6:12:5c:a8:a7: b3:34:c4:9f:1a:2e:eb:9b:cd:bc:ad:70:cf:02:4f: 68:d6:2f:f5:25:1c:66:a5:24:bb:1c:63:f0:8e:b2: 0e:7e:8e:a6:54:0f:03:10:c2:17:d9:23:9a:3e:42: 66:0b:ed:98:e1:db:e3:a1:6c:84:4a:08:04:af:eb: 78:eb:87:c8:c4:39:c7:c2:a4:89:c6:33:38:85:2b: 65:d0:71:d0:7e:4c:b0:1f:6b:be:38:7c:65:6e:4b: be:82:27:92:f6:b6:6e:fc:32:6e:8a:be:7e:85:b1: 08:8d:63:08:22:33:d1:5a:51:a6:8c:df:5e:5e:ad: 08:20:eb:b4:f0:95:b8:16:63:f4:b7:0e:bb:f8:62: 15:e7:c9:e5:47:76:22:37:15:c0:87:8f:35:25:03: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:87:E4:58:FA:A4:06:36:CF:67:DE:CB:48:FA:E3:79:F9:EA:B9:7C X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:95:5c:50:9c:c8:b2:74:61:29:fe:60:23:1e:63:19:75:1c: 3c:36:da:0c:88:2c:b0:db:e3:74:14:2a:23:ca:c3:41:a1:71: 0c:07:1e:a8:60:2c:95:9b:08:36:aa:41:e4:dc:9c:2e:a8:3e: 20:43:26:0b:4a:bc:8a:b8:ea:9c:dc:62:b2:c4:5d:99:1b:f5: af:5e:ff:51:bd:6e:35:68:16:82:10:21:4f:f3:c2:76:22:37: 14:dd:7a:83:2d:91:c2:0f:39:b8:e5:ce:fd:84:01:3a:55:35: 8c:a2:b8:69:ef:87:4e:57:f2:e9:b4:b0:66:48:41:9f:40:e1: 67:59:cf:79:ea:f8:ab:0d:fd:cb:dc:6b:fe:ee:6f:69:48:41: 04:24:5b:a8:80:78:04:3c:b2:2b:9d:78:45:80:74:a2:d5:f7: e0:be:72:29:2d:4c:30:e0:2f:97:f0:5e:24:f8:4f:10:9c:04: 3a:b8:8a:2f:50:38:c2:05:ad:7f:c0:0e:fc:2e:ab:b7:eb:8b: 44:bd:1e:25:65:f4:95:db:cf:9a:56:07:e5:ce:0a:a3:f8:ec: 34:1f:73:0c:db:30:32:9b:a2:c4:62:4f:1c:cc:9e:64:de:28: 89:13:a5:a0:5c:36:17:9e:6f:11:4a:68:65:a1:6a:e8:7d:1e: 60:0f:05:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUwNTE1MDI0NDMyWhcNMjUwNTIyMDI0NDMyWjAYMRYwFAYD VQQDEw02ODI1NTUxMC02MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBRdQbCLMNa4y2uB8lw8ceoR9GKhfD9HYcGbMzVrU1UsNlArBf7j85GByRs6 sKOKhvIBWX16+XuuprHTSm4EYrKce8fl6MXRBj1lDJYn80HLYQRBtwOFnuILGweJ JKlWmYL7thJcqKezNMSfGi7rm828rXDPAk9o1i/1JRxmpSS7HGPwjrIOfo6mVA8D EMIX2SOaPkJmC+2Y4dvjoWyESggEr+t464fIxDnHwqSJxjM4hStl0HHQfkywH2u+ OHxlbku+gieS9rZu/DJuir5+hbEIjWMIIjPRWlGmjN9eXq0IIOu08JW4FmP0tw67 +GIV58nlR3YiNxXAh481JQPKsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmH5Fj6 pAY2z2fey0j643n56rl8MB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvlVxQnMiydGEp/mAjHmMZdRw8NtoMiCyw2+N0FCojysNBoXEMBx6o YCyVmwg2qkHk3JwuqD4gQyYLSryKuOqc3GKyxF2ZG/WvXv9RvW41aBaCECFP88J2 IjcU3XqDLZHCDzm45c79hAE6VTWMorhp74dOV/LptLBmSEGfQOFnWc956virDf3L 3Gv+7m9pSEEEJFuogHgEPLIrnXhFgHSi1ffgvnIpLUww4C+X8F4k+E8QnAQ6uIov UDjCBa1/wA78Lqu364tEvR4lZfSV28+aVgflzgqj+Ow0H3MM2zAym6LEYk8czJ5k 3iiJE6WgXDYXnm8RSmhloWrofR5gDwUt -----END CERTIFICATE-----Generated at Fri May 16 08:20:32 2025 by rpki-client